RMF Cybersecurity Analyst

RMF Cybersecurity Analyst

Cyber threats are pervasive and constantly evolving. Your role as an information security risk specialist will help government agencies understand and mitigate these risks. You will work with the Air Force to discover cyber risks, understand applicable policies, develop mitigation plans, assess the threat landscape, and prepare body‑of‑evidence artifacts.

• Identify and evaluate Air Force cyber risks and assess the entire threat landscape.
• Document compliance with the Risk Management Framework (RMF) and produce System Security Plans or RMF Control Family Plans.
• Guide customers through mitigation plans and prepare evidence artifacts.
• Submit Authorization to Operate (ATO) packages using eMASS.

• 2+ years of experience evaluating system compliance against RMF using DoD cybersecurity policies.
• Experience developing RMF body‑of‑evidence documentation (e.g., System Security Plans, RMF Control Family Plans).
• Knowledge of developing and submitting RMF ATO packages in eMASS.
• Secret clearance.
• HS diploma or GED.
• DoD 8140 Certification.

• Experience with Air Force RMF.
• Experience with STIGs, SCAP, ACAS, Ports, Protocols, Services Matrix, VRAM, and HBSS.

The projected compensation range for this position is $61,900.00 to $ (annualized USD).

Full‑time and part‑time employees working at least 20 hours a week are eligible for Booz Allen’s benefit programs.

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law.